$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa File: 5d9bac24-42c5-32f4-89cc-d256e7767bce.roa (raw, json) Hash identifier: y6cFydm4OhBm7gEDykT3KS2+GpcP6mZrZcIOtPrQfu4= Subject key identifier: 2A:14:D4:F1:FD:61:72:16:0A:C7:D4:59:CF:EC:0E:D1:BA:1E:95:56 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F432858496CE45A7DEC70FEC94D8C9000 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 834 IP address blocks: 67.43.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:5a:7d:ec:70:fe:c9:4d:8c:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=fe46a083-5d04-4834-856c-df1b8792df13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:35:40:08:82:91:d6:14:64:39:9a:ea:40:af: be:c3:5f:3d:3c:dd:bd:fb:d5:4b:3d:be:ec:49:a2: cd:34:69:1d:5f:bc:cb:f7:dc:83:0e:9c:1f:da:8d: 85:61:ac:40:17:49:18:93:1c:fb:66:2b:8d:76:f4: 58:77:28:66:8e:88:83:ed:31:c0:8c:e0:5e:86:89: 94:88:a9:cb:3c:a1:fa:4e:22:22:4c:1d:8b:03:16: a3:fd:51:b9:25:9e:41:31:76:a0:98:9a:14:88:47: 40:fa:0a:5f:6b:0e:5c:64:b1:dd:0d:35:9d:28:0b: dd:50:43:0a:1c:18:bd:8e:fc:1c:a8:e1:62:b1:1b: 63:89:d6:a3:28:64:92:a4:56:5b:ab:ed:f5:e6:13: 11:75:42:8e:50:1d:7b:6c:0a:33:26:1d:56:05:1f: 15:71:38:1c:ea:58:65:1b:84:73:0b:47:a8:0e:c4: 6b:78:f8:fe:64:9f:08:a5:58:9a:60:bf:d3:1b:1d: 7f:71:52:a1:91:ac:d8:67:4e:aa:d7:b1:40:38:15: d2:e8:6b:f9:47:f1:9c:fa:14:dd:70:5c:55:08:12: fb:2d:15:4a:9d:6c:78:06:e8:1b:10:26:f3:79:80: 04:65:2b:87:92:4f:57:16:48:7a:23:fe:de:42:ba: 92:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:14:D4:F1:FD:61:72:16:0A:C7:D4:59:CF:EC:0E:D1:BA:1E:95:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:07:46:55:2e:86:ed:43:da:03:15:af:5c:6d:35:f4:18:28: e1:a1:1d:d2:01:8f:8d:a7:d3:49:60:28:ef:6e:12:77:61:40: 02:9b:c6:3f:85:ae:33:58:60:ca:96:a9:91:74:ad:1b:2d:67: 28:53:6c:be:66:15:ce:f4:5c:32:e7:67:71:f3:07:27:14:5c: 7e:9c:b7:26:e8:c3:b9:73:4b:9a:b8:6b:ba:95:f7:03:d7:54: b0:7a:e5:06:7f:d4:15:ff:c4:55:22:a6:07:0d:e2:25:e5:74: a5:3e:e9:df:a6:ac:3d:2f:1e:30:7c:e2:93:bf:d8:ec:5c:f9: a9:f4:fc:2a:33:c4:5f:29:79:92:94:3b:a3:ee:d2:30:ec:bc: f7:a1:e4:65:a3:9e:9b:4d:fd:c7:e3:5a:7d:b8:ff:d8:c3:48: 8f:50:c2:2d:e2:fa:06:85:d9:2f:6c:33:e5:e1:cf:e0:c1:71: 5d:7b:2d:b5:54:4c:c3:09:97:62:5f:a8:d9:09:a3:6d:e7:79: 86:e5:71:ff:f0:09:34:40:84:43:a6:ec:c9:6a:a8:b8:8c:af: 2b:2c:b9:0a:f7:f1:bd:ce:6a:55:aa:14:0e:40:cb:6e:f5:c9: 32:88:10:17:d4:90:49:f6:9b:c9:ff:df:51:bb:2b:32:21:27: 9d:75:fa:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5Fp97HD+yU2MkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ZmU0NmEwODMtNWQwNC00ODM0LTg1NmMtZGYxYjg3OTJkZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDVACIKR1hRkOZrqQK++w189PN29+9VLPb7s SaLNNGkdX7zL99yDDpwf2o2FYaxAF0kYkxz7ZiuNdvRYdyhmjoiD7THAjOBehomU iKnLPKH6TiIiTB2LAxaj/VG5JZ5BMXagmJoUiEdA+gpfaw5cZLHdDTWdKAvdUEMK HBi9jvwcqOFisRtjidajKGSSpFZbq+315hMRdUKOUB17bAozJh1WBR8VcTgc6lhl G4RzC0eoDsRrePj+ZJ8IpViaYL/TGx1/cVKhkazYZ06q17FAOBXS6Gv5R/Gc+hTd cFxVCBL7LRVKnWx4BugbECbzeYAEZSuHkk9XFkh6I/7eQrqSMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoU1PH9YXIWCsfUWc/sDtG6HpVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNWQ5YmFjMjQtNDJjNS0z MmY0LTg5Y2MtZDI1NmU3NzY3YmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQysoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4HRlUuhu1D2gMVr1xtNfQYKOGhHdIBj42n00lgKO9uEndhQAKbxj+F rjNYYMqWqZF0rRstZyhTbL5mFc70XDLnZ3HzBycUXH6ctybow7lzS5q4a7qV9wPX VLB65QZ/1BX/xFUipgcN4iXldKU+6d+mrD0vHjB84pO/2Oxc+an0/CozxF8peZKU O6Pu0jDsvPeh5GWjnptN/cfjWn24/9jDSI9Qwi3i+gaF2S9sM+Xhz+DBcV17LbVU TMMJl2JfqNkJo23neYblcf/wCTRAhEOm7MlqqLiMryssuQr38b3OalWqFA5Ay271 yTKIEBfUkEn2m8n/31G7KzIhJ511+hA= -----END CERTIFICATE-----Generated at Sat Apr 26 15:53:46 2025 by rpki-client